Overview

overview

10

Static

static

3

dridex

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea8521cc18559f9ef33aa0fcc78734fc788d9d23604637c02716335641c7f2c4

  • Size

    1.1MB

  • Sample

    231113-nrjf6scd31

  • MD5

    0144140922c83bdacbf8ef346375bef5

  • SHA1

    5dca87fb6445a49b1414ed940f48163f7f3708f5

  • SHA256

    ea8521cc18559f9ef33aa0fcc78734fc788d9d23604637c02716335641c7f2c4

  • SHA512

    687fb862a0f3a5df61d03654a57f99565a9000bf17032ccf1a0affb374b9f5b3f947e94a72e2dc38c05c1e77a4c272b65a91cf3fd4c984aea3de67c22d77d7ec

  • SSDEEP

    24576:vy3TbSaRD4qJCKu+Fa256r1N3nNZ1BtUet7//W3AhQ8u:63SiHJCKVFa25y1NXNZuetb/l

Score
10/10
mysticpersistencestealer

Malware Config

Targets

    • Target

      ea8521cc18559f9ef33aa0fcc78734fc788d9d23604637c02716335641c7f2c4

    • Size

      1.1MB

    • MD5

      0144140922c83bdacbf8ef346375bef5

    • SHA1

      5dca87fb6445a49b1414ed940f48163f7f3708f5

    • SHA256

      ea8521cc18559f9ef33aa0fcc78734fc788d9d23604637c02716335641c7f2c4

    • SHA512

      687fb862a0f3a5df61d03654a57f99565a9000bf17032ccf1a0affb374b9f5b3f947e94a72e2dc38c05c1e77a4c272b65a91cf3fd4c984aea3de67c22d77d7ec

    • SSDEEP

      24576:vy3TbSaRD4qJCKu+Fa256r1N3nNZ1BtUet7//W3AhQ8u:63SiHJCKVFa25y1NXNZuetb/l

    Score
    10/10
    mysticpersistencestealer

    • Detect Mystic stealer payload

    • Mystic

      Mystic is an infostealer written in C++.

      stealermystic

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks